This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91273D6/139E1244051011EB80E3175BC4F9AE02/C1B1AEC6051111EBBA2CAF5CC4F9AE02.roa File: C1B1AEC6051111EBBA2CAF5CC4F9AE02.roa (raw, json) Hash identifier: Rn+i/x8H2eWzt9fmwTwYfrRk8EJ3dubKBMEnFNfmhUE= Subject key identifier: 8A:EA:71:77:4F:6D:D8:9C:45:37:F6:F8:53:AD:DB:09:DD:C1:55:82 Certificate issuer: /CN=A91273D6/serialNumber=2FDF7A6AF904DF2CD47E65CCC0C9C5CCBF2398E5 Certificate serial: 07EF Authority key identifier: 2F:DF:7A:6A:F9:04:DF:2C:D4:7E:65:CC:C0:C9:C5:CC:BF:23:98:E5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L996avkE3yzUfmXMwMnFzL8jmOU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91273D6/139E1244051011EB80E3175BC4F9AE02/C1B1AEC6051111EBBA2CAF5CC4F9AE02.roa Signing time: Mon 13 Oct 2025 06:21:17 +0000 ROA not before: Mon 13 Oct 2025 06:21:17 +0000 ROA not after: Thu 30 Jul 2026 00:00:00 +0000 asID: 56199 IP address blocks: 103.156.194.0/24 maxlen: 24 103.171.228.0/24 maxlen: 24 218.100.87.0/24 maxlen: 24 2001:df0:215::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91273D6/139E1244051011EB80E3175BC4F9AE02/L996avkE3yzUfmXMwMnFzL8jmOU.crl rsync://rpki.apnic.net/member_repository/A91273D6/139E1244051011EB80E3175BC4F9AE02/L996avkE3yzUfmXMwMnFzL8jmOU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L996avkE3yzUfmXMwMnFzL8jmOU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 20:05:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2031 (0x7ef) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91273D6, serialNumber=2FDF7A6AF904DF2CD47E65CCC0C9C5CCBF2398E5 Validity Not Before: Oct 13 06:21:17 2025 GMT Not After : Jul 30 00:00:00 2026 GMT Subject: CN=68ec9a5d-a28d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:e6:bf:b7:9a:36:ba:77:74:8e:85:9a:4d:ee: a9:27:e4:15:36:dc:8e:4b:b7:9c:87:dc:5a:b8:56: 0e:b1:0d:5f:b1:cf:b2:87:73:f9:14:a2:bd:88:3b: 02:c1:53:f2:51:10:1e:a7:ad:cb:b1:51:21:b3:14: 40:33:32:47:1f:15:48:84:4a:9e:03:c7:a0:23:72: 08:4d:d5:2d:73:ba:33:3f:17:f7:bb:ee:0d:ba:3c: 22:2c:e0:dd:e4:43:2f:5f:9d:ed:e0:f4:3f:c9:81: 16:cf:d6:39:c7:e9:51:10:c4:d4:53:d1:56:de:34: 79:ba:28:15:c8:ae:e7:d7:a8:54:9f:15:83:e5:da: bb:dd:64:0d:8a:2a:38:be:af:6e:ba:0f:99:b7:14: 92:b5:8c:b7:88:e7:ab:b8:d7:9f:29:e0:4a:dc:c9: 33:e1:bc:84:a2:d6:a0:fb:81:4f:ca:62:7f:7a:be: 38:21:d0:ac:73:6c:a5:37:ef:74:6b:a2:24:1c:d1: c0:56:15:9a:ab:5e:a3:5e:46:9d:0f:f1:d4:ae:99: af:98:46:5c:90:44:85:b9:b5:d8:df:97:bf:b5:d8: a3:df:d9:bc:d4:71:7c:4f:7a:c6:71:f7:9b:68:19: c9:2d:83:59:bc:b6:7b:f5:27:63:58:0b:dd:73:9b: 40:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:EA:71:77:4F:6D:D8:9C:45:37:F6:F8:53:AD:DB:09:DD:C1:55:82 X509v3 Authority Key Identifier: keyid:2F:DF:7A:6A:F9:04:DF:2C:D4:7E:65:CC:C0:C9:C5:CC:BF:23:98:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91273D6/139E1244051011EB80E3175BC4F9AE02/L996avkE3yzUfmXMwMnFzL8jmOU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L996avkE3yzUfmXMwMnFzL8jmOU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91273D6/139E1244051011EB80E3175BC4F9AE02/C1B1AEC6051111EBBA2CAF5CC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.156.194.0/24 103.171.228.0/24 218.100.87.0/24 IPv6: 2001:df0:215::/48 Signature Algorithm: sha256WithRSAEncryption 50:33:b6:13:03:75:36:06:b1:10:ad:8d:64:98:ca:5c:d6:84: 4a:dc:a1:ad:8b:c9:54:a8:e0:9d:b7:d7:d8:f9:03:4b:19:aa: ad:09:85:a2:c5:87:13:38:93:38:cb:74:8f:3d:17:d9:d1:32: 82:0e:9d:da:b6:f3:55:8f:e6:aa:7c:aa:05:9b:f8:c2:5c:0a: 77:df:af:97:f2:4e:1e:fc:c1:36:9d:fc:07:cb:ed:08:11:fa: a7:b6:32:d2:d6:96:3d:00:e9:67:e4:3c:2c:44:d7:0c:da:0f: 4a:3f:e3:64:33:38:ad:df:d3:67:53:a0:08:69:b7:2f:86:32: 70:33:22:b5:24:43:64:67:4d:cb:75:2f:3f:fd:6c:5e:0c:e1: 82:26:4f:94:8d:2d:d3:29:99:34:87:fb:64:1d:22:fc:8f:04: 8f:9b:2f:86:f5:19:cb:7d:af:3f:62:cf:86:be:ee:af:6f:55: ed:f9:b9:3f:32:08:b3:5f:b6:ba:69:da:34:30:3a:e6:d7:ce: b6:1e:4a:b3:3f:5c:6e:66:55:25:54:0b:64:0f:0a:9b:26:a7: 6d:ba:66:1c:06:0e:86:51:37:20:e4:e4:d2:3c:f5:cf:44:fe: 80:5d:14:0a:d7:89:45:55:14:e2:2e:c3:c0:c8:41:ac:5c:32: 2c:13:d7:94 -----BEGIN CERTIFICATE----- MIIFjjCCBHagAwIBAgICB+8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjczRDYxMTAvBgNVBAUTKDJGREY3QTZBRjkwNERGMkNENDdFNjVDQ0MwQzlDNUND QkYyMzk4RTUwHhcNMjUxMDEzMDYyMTE3WhcNMjYwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OGVjOWE1ZC1hMjhkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8ua/t5o2und0joWaTe6pJ+QVNtyOS7ech9xauFYOsQ1fsc+yh3P5FKK9iDsC wVPyURAep63LsVEhsxRAMzJHHxVIhEqeA8egI3IITdUtc7ozPxf3u+4NujwiLODd 5EMvX53t4PQ/yYEWz9Y5x+lREMTUU9FW3jR5uigVyK7n16hUnxWD5dq73WQNiio4 vq9uug+ZtxSStYy3iOeruNefKeBK3Mkz4byEotag+4FPymJ/er44IdCsc2ylN+90 a6IkHNHAVhWaq16jXkadD/HUrpmvmEZckESFubXY35e/tdij39m81HF8T3rGcfeb aBnJLYNZvLZ79SdjWAvdc5tATQIDAQABo4ICsjCCAq4wHQYDVR0OBBYEFIrqcXdP bdicRTf2+FOt2wndwVWCMB8GA1UdIwQYMBaAFC/femr5BN8s1H5lzMDJxcy/I5jl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNzNENi8xMzlFMTI0NDA1 MTAxMUVCODBFMzE3NUJDNEY5QUUwMi9MOTk2YXZrRTN5elVmbVhNd01uRnpMOGpt T1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0w5OTZhdmtFM3l6VWZtWE13TW5Gekw4am1PVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MjczRDYvMTM5RTEyNDQwNTEwMTFFQjgwRTMxNzVCQzRGOUFFMDIvQzFCMUFFQzYw NTExMTFFQkJBMkNBRjVDQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwPAYIKwYBBQUHAQcBAf8E LTArMBgEAgABMBIDBABnnMIDBABnq+QDBADaZFcwDwQCAAIwCQMHACABDfACFTAN BgkqhkiG9w0BAQsFAAOCAQEAUDO2EwN1NgaxEK2NZJjKXNaEStyhrYvJVKjgnbfX 2PkDSxmqrQmFosWHEziTOMt0jz0X2dEygg6d2rbzVY/mqnyqBZv4wlwKd9+vl/JO HvzBNp38B8vtCBH6p7Yy0taWPQDpZ+Q8LETXDNoPSj/jZDM4rd/TZ1OgCGm3L4Yy cDMitSRDZGdNy3UvP/1sXgzhgiZPlI0t0ymZNIf7ZB0i/I8Ej5svhvUZy32vP2LP hr7ur29V7fm5PzIIs1+2umnaNDA65tfOth5Ksz9cbmZVJVQLZA8KmyanbbpmHAYO hlE3IOTk0jz1z0T+gF0UCteJRVUU4i7DwMhBrFwyLBPXlA== -----END CERTIFICATE-----Generated at Sun Dec 7 05:09:36 2025 by rpki-client